2 matches found
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the function saveConfigFile in the file HealthUtils.java, where a failed configuration file write triggers. An attacker can gain unauthorized access to system credentials by accessing...
6.9CVSS6.7AI score0.00154EPSS
SaveExploits0References2
GHSA-V75G-77VF-6JJQ Para Server Logs Sensitive Information
CWE ID: CWE-532 Insertion of Sensitive Information into Log File CVSS: 7.5 High Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Component: Para Server Initialization Logging Version: Para v1.50.6 File Path:...
6.2CVSS5.9AI score0.00154EPSS
SaveExploits0References4
20